1Who we are
Povie Studio (poviestudio.com) is run by [COMPANY LEGAL NAME], registered at [REGISTERED ADDRESS]. We decide how your personal information is used. Under European and UK law, that makes us the "controller" of your data.
This policy covers the poviestudio.com website and the Povie Studio web app. For questions about your data, email jake@kokoai.im.
2What we collect
Right now, before launch
- Your email address, if you join the early-access list.
- Basic technical information that every website receives when you visit: your IP address, browser and device type, the pages you open, and the date and time. Our hosting provider keeps this in server logs to deliver the site and protect it from attacks.
- Font requests. Our site loads its font from Google Fonts, so your browser connects to Google, and Google receives your IP address. Google's privacy policy applies to that.
When Povie Studio opens
- Account information: your email address and display name, your age or date of birth if we ask for it to check you're old enough, and, if you sign in with another service such as Google or Apple, the name and email that service shares with us.
- What you make: the sentences you type, the characters and places you pick, and the videos Povie Studio makes for you.
- How you use Povie Studio: which features you use, how many videos you make, errors, your device and browser, and your rough location (country or city) based on your IP address.
- Purchase information: PayPal handles all payments. PayPal sends us your name, PayPal email address, country, the transaction ID, the amount, the date and whether the payment went through. We never receive or store your card or bank account number.
- Messages you send us, like support emails, reports and feedback.
- Connected apps: if Povie Studio lets you post straight to TikTok, Instagram or YouTube and you connect your account, we get the permission to post and the basic profile details that app shares. We only post when you tell us to.
3Why we use it
We only use your information for the reasons below. In the EU and UK, the law asks us to name a "legal basis" for each one, so we've listed that too.
Send you the early-access email
One email when Povie Studio opens. Nothing else.
Legal basis: your consent. You can take it back any time.
Run Povie Studio for you
Create your account, make your videos, save them and show them to you, and send service emails like receipts.
Legal basis: we need it to provide the service you asked for (a contract).
Take payments and keep records
Process purchases with PayPal, stop fraud, and keep the records tax law requires.
Legal basis: contract, and legal obligation.
Keep people and Povie Studio safe
Block content that breaks our rules, stop abuse and fix security problems.
Legal basis: our legitimate interest in keeping users and the service safe, and legal obligation.
Make Povie Studio better
Understand which features get used and fix bugs.
Legal basis: our legitimate interest in improving the service, or your consent where the law requires it (for example for analytics cookies).
Answer you and follow the law
Reply to your messages, and respond to lawful requests from authorities.
Legal basis: legitimate interest, and legal obligation.
We don't sell your personal information, and we don't use it to show you targeted ads.
4Who we share it with
We only share personal information with companies that help us run Povie Studio, and only what they need to do that job. They may only use it to work for us.
- Hosting and storage providers, which run our website and store accounts and videos.
- Email providers, which send the early-access email and service emails.
- Google, whose Google Sheets holds the early-access list until launch, with the time you joined, which form you used and the site or link you came from.
- AI model providers, which turn what you type and pick into a video, on our behalf.
- Microsoft, which runs Clarity, our analytics tool (see section 5).
- PayPal, which processes payments. PayPal is responsible for the information it collects at checkout under its own privacy statement.
- Apps you choose to connect, when you ask us to post a video there.
- Professional advisers, like lawyers and accountants, when needed.
- The police, courts or regulators, when the law requires it or to protect someone's safety.
- A new owner, if Povie Studio is sold or merged. They must keep protecting your information as this policy says.
Want the current list of the companies we use? Email us and we'll send it.
5Cookies and analytics
Cookies are small files a website saves in your browser.
- Analytics: Microsoft Clarity. On poviestudio.com we use Microsoft Clarity to see how people use the page, through heatmaps and session replays: clicks, taps, scrolling and mouse movement, plus your browser, device, screen size and approximate location (from your IP address). What you type into forms, like your email, is masked and not recorded. Clarity may set cookies (for example
_clckand_clsk) to connect page views into one visit. Microsoft processes this data for us; see the Microsoft Privacy Statement. In the EU, UK and Switzerland, Clarity only uses cookies if you agree. We don't use advertising trackers. - When Povie Studio opens, we'll use cookies (or similar browser storage) that are needed for it to work: keeping you signed in, security, and remembering your settings. PayPal may set its own cookies during checkout.
- If we add other analytics or any cookie that isn't strictly needed, we'll update this page first and, where the law requires it (for example in the EU and UK), ask for your consent before using them.
- You can block or delete cookies in your browser settings. Some parts of Povie Studio may not work without them.
6How long we keep it
- Early-access email: until we send the launch email. If you don't create an account after that, we delete it within [EARLY-ACCESS RETENTION, e.g. 90 days after launch]. Sooner if you unsubscribe or ask us to.
- Your account, input and videos: while your account is open. We delete them within [DELETION PERIOD, e.g. 30 days] after you delete your account. Copies in backups are removed when those backups expire.
- Server logs: [LOG RETENTION, e.g. 30 days].
- Payment records: as long as tax and accounting laws require.
- Records about rule-breaking: as long as needed to keep people safe and follow the law.
7How we protect it
We use encrypted connections (HTTPS), we limit access to people who need it, and we choose providers who take security seriously. No system is 100% secure, though. If a data breach affects you, we'll tell you and the authorities as the law requires. You can help by keeping your login private.
8Children and teens
- Povie Studio is not for children under 13. We don't knowingly collect personal information from children under 13, in line with the US Children's Online Privacy Protection Act (COPPA) and similar laws. If we learn we have, we'll delete it.
- If you're a parent and think your child under 13 gave us information, email jake@kokoai.im and we'll delete it.
- Teens (13 to 17) need a parent or guardian's permission to use Povie Studio. In some countries (for example parts of Europe, where the age can be 14, 15 or 16), a parent must consent before we can use a young person's data based on consent.
- Parents and guardians can contact us to see or delete their teen's information.
9Your rights
Everyone
Wherever you live, you can ask us to show you, correct or delete your personal information, and you can unsubscribe from our emails at any time. Email jake@kokoai.im. To protect you, we'll check the request comes from the email address linked to your data.
EU, EEA and UK (GDPR and UK GDPR)
You have the right to:
- get a copy of your data (access),
- fix data that's wrong (correction),
- have your data deleted (erasure),
- limit how we use it (restriction),
- get your data in a format you can take elsewhere (portability),
- object to us using it based on our legitimate interests,
- take back your consent at any time, without affecting what we did before, and
- complain to your local data protection authority (in the UK, the Information Commissioner's Office).
We don't make decisions about you with legal or similarly serious effects using only automated means. We reply to requests within one month.
California (CCPA / CPRA)
You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of its "sale" or "sharing"; and not to be treated differently for using these rights. You can also ask someone (an "authorized agent") to make a request for you.
- What we collect: identifiers (like your email address), internet activity (like server logs and how you use Povie Studio), and, once we launch, purchase records, the content you create, and rough location.
- Where it comes from: you, your browser, and PayPal.
- Why: the reasons in section 3.
- Who gets it: the service providers in section 4, for business purposes only.
- We don't sell or share your personal information (including for cross-context behavioral advertising), and we don't use sensitive personal information for anything that would give you a right to limit it.
We reply within 45 days.
Other US states
If you live in another US state with a privacy law, you have similar rights. If we turn down your request, you can appeal by replying to our answer.
10Data sent to other countries
We and the companies we work with may store and process your information in countries other than yours, including the United States. Privacy laws there may be different from where you live. When we send personal data from the EU or UK to other countries, we use legal protections such as the European Commission's Standard Contractual Clauses and the UK's International Data Transfer Addendum, or we rely on countries the EU or UK has approved. You can ask us for a copy.
11How to delete your data
- Early-access list: click "unsubscribe" in any email from us, or email jake@kokoai.im from the same address with the subject "Delete my data".
- Account (after launch): delete your account in your settings, or email us from the address on your account.
- We'll confirm by email when it's done, within [DELETION PERIOD, e.g. 30 days].
We may keep a few things when the law requires it or allows it: payment records that tax law says we must keep, information needed for legal claims or safety, and, if you ask, a note of your email address so we don't contact you again.
Videos you've already posted on TikTok, Instagram, YouTube or other apps are controlled by those apps. Delete them there.
12Changes to this policy
This policy is effective from [EFFECTIVE DATE]. We'll update it as Povie Studio grows, for example when the studio opens or if we change our analytics. The "Last updated" date at the top shows the latest version. If we make important changes, we'll tell you before they apply, by email or on the site.
13Contact us
Questions, requests or complaints about your privacy? Email us at jake@kokoai.im
By post: [COMPANY LEGAL NAME], [REGISTERED ADDRESS]